diff --git a/package/libheif/0001-fix-wrong-copy-width-in-overlay-images.patch b/package/libheif/0001-fix-wrong-copy-width-in-overlay-images.patch deleted file mode 100644 index 4d845b2f90..0000000000 --- a/package/libheif/0001-fix-wrong-copy-width-in-overlay-images.patch +++ /dev/null @@ -1,26 +0,0 @@ -From b8c12a7b70f46c9516711a988483bed377b78d46 Mon Sep 17 00:00:00 2001 -From: Dirk Farin -Date: Tue, 11 Nov 2025 19:47:50 +0100 -Subject: [PATCH] fix wrong copy width in overlay images (thanks to Aldo - Ristori for reporting this) - -CVE: CVE-2025-68431 -Upstream: https://github.com/strukturag/libheif/commit/b8c12a7b70f46c9516711a988483bed377b78d46 -Signed-off-by: Thomas Perale ---- - libheif/pixelimage.cc | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/libheif/pixelimage.cc b/libheif/pixelimage.cc -index f202c61049..84a8dd739e 100644 ---- a/libheif/pixelimage.cc -+++ b/libheif/pixelimage.cc -@@ -1508,7 +1508,7 @@ Error HeifPixelImage::overlay(std::shared_ptr& overlay, int32_t - if (!has_alpha) { - memcpy(out_p + out_x0 + (out_y0 + y - in_y0) * out_stride, - in_p + in_x0 + y * in_stride, -- in_w - in_x0); -+ in_w); - } - else { - for (uint32_t x = in_x0; x < in_w; x++) { diff --git a/package/libheif/libheif.hash b/package/libheif/libheif.hash index da2516a583..3da82e3e27 100644 --- a/package/libheif/libheif.hash +++ b/package/libheif/libheif.hash @@ -1,3 +1,3 @@ # Locally computed: -sha256 68ac9084243004e0ef3633f184eeae85d615fe7e4444373a0a21cebccae9d12a libheif-1.20.2.tar.gz +sha256 9799b4b1c19006f052bcf399c761cc147e279762683cefaf16871dbb9b4ea2a1 libheif-1.21.1.tar.gz sha256 fa81ce652315b013359d6e8e4744335f31a50c7c192907176d3632f78a3b4596 COPYING diff --git a/package/libheif/libheif.mk b/package/libheif/libheif.mk index b69e699bf9..acd302d847 100644 --- a/package/libheif/libheif.mk +++ b/package/libheif/libheif.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBHEIF_VERSION = 1.20.2 +LIBHEIF_VERSION = 1.21.1 LIBHEIF_SITE = https://github.com/strukturag/libheif/releases/download/v$(LIBHEIF_VERSION) LIBHEIF_LICENSE = LGPL-3.0+ LIBHEIF_LICENSE_FILES = COPYING @@ -23,9 +23,6 @@ LIBHEIF_CONF_OPTS = \ -DWITH_REDUCED_VISIBILITY=ON \ -DWITH_SvtEnc=OFF -# 0001-fix-wrong-copy-width-in-overlay-images.patch -LIBHEIF_IGNORE_CVES += CVE-2025-68431 - ifeq ($(BR2_PACKAGE_DAV1D),y) LIBHEIF_CONF_OPTS += -DWITH_DAV1D=ON LIBHEIF_DEPENDENCIES += dav1d